SecurityWeek reports Zoom Workplace and Asus router patches
SecurityWeek reports Zoom patched two Workplace for Windows flaws in 7.1.8 and later, and Asus issued a router advisory; update both.
- Published
- Fixed in
- Zoom Workplace for Windows 7.1.8 and later; Asus router firmware versions not confirmed
- Exploitation
- No evidence reported. SecurityWeek says Zoom makes no mention of exploitation in the wild; Asus exploitation status is not stated.
Live scores
CVE-2026-108186- EPSS
- 0.004
low predicted chance of attack - VEDAS
- 0.052
little exploit evidence - On CISA KEV
- Not listed
- Detection rule
- No public rule yet
Live scores
CVE-2026-108187- EPSS
- 0.002
low predicted chance of attack - VEDAS
- 0.056
little exploit evidence - On CISA KEV
- Not listed
- Detection rule
- No public rule yet
What happened
According to SecurityWeek, published on 2026-11-11, Asus and Zoom released security updates this week. This advisory rests on that single report. We have not independently verified the details.
SecurityWeek reports that Zoom patched two vulnerabilities in Workplace for Windows. The first, CVE-2026-108186, is described as a critical-severity unauthenticated privilege escalation bug with a CVSS score of 9.6. The second, CVE-2026-108187, has a CVSS score of 8.1. SecurityWeek says it could also allow remote, unauthenticated attackers to elevate their privileges. According to SecurityWeek, Zoom Workplace for Windows versions 7.1.8 and later contain patches for both bugs, and Zoom makes no mention of either being exploited in the wild.
SecurityWeek also reports that Asus published an advisory describing four high- and medium-severity vulnerabilities in certain router firmware releases. It says successful exploitation could let attackers execute arbitrary commands with root privileges, or overwrite memory and cause a crash.
Not confirmed: the Asus CVE identifiers, the affected router models, the fixed firmware versions, and whether any of these flaws are exploited. The Asus security advisory page, as provided to us, contained general policy text but no list of specific advisories, so we could not check the Asus details against the vendor.
Am I affected?
- Zoom Workplace for Windows: according to SecurityWeek, versions before 7.1.8 are the ones the fix addresses. SecurityWeek states that 7.1.8 and later contain the patches, but it does not give the exact range of vulnerable versions. Not confirmed.
- Asus routers: SecurityWeek says “certain router firmware releases” are affected. The models and firmware versions are not confirmed in the sources.
- Exploitation: SecurityWeek says Zoom makes no mention of exploitation in the wild. It does not say whether the Asus flaws are exploited.
What to do now
- Check your Zoom Workplace for Windows version and update to 7.1.8 or later, per SecurityWeek.
- Open the Asus security advisory page and find the router advisory that matches your model. Apply the firmware it lists. Asus itself encourages keeping products updated with the latest firmware.
- If you cannot identify your router model or its advisory, treat the affected firmware as not confirmed and ask Asus through its published vulnerability contact channel.